Ransomware group
Icefire ransomware: victims and leak site activity
The Icefire ransomware group has listed 11 victims on its leak site since August 2022; its latest post is from 20 August 2022. Most targeted sector: Technology.
Total posts
11
First seen
2022-08-20
Latest post
2022-08-20
Countries hit
0
About Icefire
IceFire is a ransomware group first observed in 2022 that expanded to Linux in early 2023 by exploiting a vulnerability in IBM Aspera Faspex (CVE-2022-47986), targeting media and entertainment organizations in Turkey, Iran, Pakistan, and the UAE using double-extortion tactics.
Most targeted countries
Not enough data.
All countries →Most targeted sectors
All sectors →Icefire victims per year
All 11 victims
Search every post in the full table.| Victim | Country | Sector | Discovered |
|---|---|---|---|
| *.algotrader.com | — | Technology | |
| *.bestservers.pro | — | Technology | |
| *.iperactive.com.ar | — | Technology | |
| *.cco1.com | — | Technology | |
| *.vps-vds.com | — | Technology | |
| *.guneshosting.com | — | Technology | |
| *.kodhosting.com | — | Technology | |
| *.kru.ac.th | — | Education | |
| *.directfn.net | — | Financial Services | |
| *.feesh.ch | — | Retail & E-Commerce | |
| *.skifgroup.com | — | Manufacturing |